Oaktech

It would also appear that at the moment the leaked 'stock' media will only install via UEFI and TPM 2.0 which if it continues has the potential to render practically my whole computing fleet useless... Which might be a bit of an issue for many people. There are already documented ways round it, but they're a bit kludgey.

Yeah, I think to the left for office machines and centred for teaching unless they kick up a fuss.

What do you need the account to do that is being done by script? could it be done another way such as by GPO registry or GPP?

I've recently taken on 2 clients who have exactly this set up, one as you say, Phoenix, the other Rocket WP, so yeah, seems to be a thing. I'm pretty sure it's not a good thing.

Ah, but that would mean it looked different and the eleventy billion legacy apps that run off drive mappings would need to be replaced.

How are they used to accessing it? I'm doing cloud drive mapper for some of mine because we *love* a mapped drive here.

Script it with the standalone MSU or CAB file... https://www.danielengberg.com/install-msu-powershell-specific-kb/

but what about navigating to: \\.local\SysVol\.local\Policies\{A1A0B568-71D9-4C4D-9DCF-CD9F431626C8}\gpt.ini can you read that?

Can you see that gpt.ini file? Have you got 'domain\domain computers' 'read' in the delegation for policies containing computer settings?

I had some problems with a subscription via SWGFL that didn't renew when we had paid for it and had no luck with sophos support... I Facebook messaged Paul Ducklin, one of their senior engineers, via the Naked Security channel with the scenario and our customer IDs and it was sorted within an hour!

Doesn't seem to - my stock DLP policy basically dumps it with me as though I was the recipient.

Just pick up the inventry files off the inventry device, stick the files on a domain server that the user has read to, run the shortcut off the server. It's not a supported config and you need to make sure you update the inventry files when inventry do an update but it's the only way we've discovered to make it run with acceptable speed and reliabilty.

You're right, however, that wasn't the question... We need Radio Mic, not WiFi at this moment...

Worth checking if your equipment has pilot tone capability and that it is turned on as that can help prevent inter-mod issues. It might be worth tabling an upgrade to some 2.4ghz as they are much more resistant.

I swear to god the M$ licensing model is deliberately over complicated to push you down the 'screw it, i'll just license data centre, it's easier' route. Having said that though, Millgate's licensing gurus have always steered me right.

Interestingly we had guest portal issues with running the controller directly on a Windows VM which was fixed by moving it to a docker implementation on windows (along with our Xibo instance) with linux containers via the linuxserver.io image.

You missed sharks. https://www.youtube.com/watch?v=VVJlKJi9FWU

something was/is affecting various Google services this morning too, possibly authentication side as anyone logged on from last night has been fine, but creating new sessions has been slow-to-failing. not helpful...

My favourite store for this is fs.com cheap, good stuff, delivery times acceptable for being in china and good sales support (I ordered 3 of one type SFP and 1 of another by accident and they paused my order and called me within an hour to check that I had meant to do it!)

Perhaps, but I'm given to understand that you can add HTML to that message that might help... THIS THE WRONG ADDRESS DUMB*SS

Transport rule to catch the old address and reply with a verbose message explaining the dumb*ss thing they just did...

I don't think you can do it per entry, but you can turn off suggestions altogether via group policy, which I think clears everyones, which I did for 3 months and then turned it back on and let the suggestions populate again.

We discourage personal devices, but where people are insistent, then we ensure that they are encrypted, protected with a strong passcode and enrolled in one of our MDMs (either Meraki, InTune or Apple School Manager) so we can remotely wipe the device in case of theft.

You need to make yourself a 'central store' from the sounds of it... https://docs.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store

The whole sequence will time out... Just a thought, I had MDT issues deploying a specific build of Reader DC on 20H2 that i didn't on 1909, the task sequence hung with a constant CPU of 26% until the whole sequence timed out. If you are deploying that you might do well to update the package. It might not be your specific issue, but it's worth a try.